Bash exploit for CVE-2025-24893, unauthenticated RCE in XWiki Platform, using template injection in the SolrSearch macro to execute arbitrary system commands.
PoC for CVE-2025-24893
XWiki Unauthenticated RCE Exploit for Reverse Shell
XWiki 15.10.11, 16.4.1 and 16.5.0RC1 Unauthenticated Remote code execution POC
Python exploit for CVE-2025-24893 that executes a reverse shell on vulnerable web applications, with shell upgrade instructions.
Python exploit for CVE-2025-24893 in XWiki Platform, allowing remote command execution via crafted requests. Includes usage instructions and a Nuclei template reference.
Reverse Shell Payload for CVE-2025-24893
CVE-2025-24893 RCE exploit for XWiki with reverse shell capability
Proof of Concept for CVE-2025-24893 demonstrating unauthenticated remote command execution in XWiki through unsafe server-side template evaluation.
PoC exploit for XWiki Remote Code Execution Vulnerability (CVE-2025-24893)
POC exploit for CVE-2025-24893
Proof-of-concept exploit for CVE-2025-24893 enabling unauthenticated remote code execution on XWiki with arbitrary shell commands and reverse shell injection via Python.
CVE-2025-24893 is a critical unauthenticated remote code execution vulnerability in XWiki (versions < 15.10.11, 16.4.1, 16.5.0RC1) caused by improper handling of Groovy expressions in the SolrSearch macro.
Unauthenticated remote code execution exploit for XWiki SolrSearch (CVE-2025-24893) via Groovy injection in the text parameter, with Docker-based lab environment and PoC script.
Proof-of-concept exploit for CVE-2025-24893, an unauthenticated remote code execution vulnerability in XWiki via unsafe Groovy expression handling in the SolrSearch macro.
Unauthenticated Remote Code Execution in XWiki via SolrSearch Macro
Python3 exploit for CVE-2025-24893, a remote code execution vulnerability in XWiki Platform. Automatically detects HTTPS/HTTP, constructs a Groovy async macro payload, and delivers a configurable reverse shell for authorized security testing.
Exploit de Execução Remota de Código (RCE) no XWiki
A critical remote code execution (RCE) vulnerability (CVE‑2025‑24893) exists in the XWiki Platform, specifically in the SolrSearch RSS feed endpoint.
CVE-2025-24893 is a critical unauthenticated remote code execution (RCE) vulnerability in XWiki, a popular open-source enterprise wiki platform.
PoC exploits CVE-2025-24893 , a remote code execution (RCE) vulnerability in XWiki caused by improper sandboxing in Groovy macros rendered asynchronously. It allows arbitrary command execution through injection into RSS-based SolrSearch endpoints.
Proof-of-Concept exploit for CVE-2025-24893, an unauthenticated Remote Code Execution (RCE) vulnerability in XWiki. Exploits a template injection flaw in the SolrSearch endpoint via Groovy script execution.
Self-contained Docker lab that reproduces CVE-2025-24893, an unauthenticated SSTI-to-RCE in XWiki SolrSearch, and compares vulnerable vs patched behavior.
CVE-2025-24893 – XWiki SSTI unauthenticated RCE exploit (HackTheBox CTF)
Unauthenticated RCE exploit for XWiki CVE-2025-24893 via Groovy script injection
Unauth RCE PoC for XWiki SolrSearch (CVE-2025-24893). Command exec + reverse shell.
OSCP like CVE-2025-24893 exploit for Linux XWiki
Proof-of-concept exploit for CVE-2025-24893, an SSTI vulnerability in XWiki, providing an interactive shell for remote command execution.
Python exploit for CVE-2025-24893, a critical unauthenticated RCE in XWiki Platform, allowing arbitrary Groovy code execution via crafted RSS request to SolrSearch endpoint.
PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11, 16.4.1 and 16.5.0RC1.
This vulnerability could allow a malicious user to execute remote code by sending appropriately crafted requests to the default search engine SolrSearch
PoC | XWiki Platform 15.10.10 - Remote Code Execution
This is a small script for the rce vulnerability for CVE-2025-24893. It supports basic input/output
XWiki SolrSearchMacros 远程代码执行漏洞PoC（CVE-2025-24893）
CVE-2025-24893 tool
Bash POC script for RCE vulnerability in XWiki Platform
CVE-2025-24893 | Vulnérabilité d'exécution de code à distance sur la plateforme XWiki (preuve de concept)
Python-based exploit script for CVE-2025-24893, targeting web applications with a simple command-line interface for automated exploitation.
A POC for CVE-2025-24893 written in python
Proof-of-concept or exploit code for CVE-2025-24893, demonstrating the vulnerability and potential exploitation techniques.
Exploit for CVE-2025-24893 enabling remote command execution and reverse shell on vulnerable web applications. Includes CLI options for targeting URLs, executing commands, and establishing reverse connections.
POC
Some poorly crafted exploit scripts
Python exploit script for CVE-2025-24893, targeting web applications. Executes a proof-of-concept to trigger the vulnerability on a specified target URL.
Al Baradi Joy · multiple · Apr 7, 2025
Maksim Rogov · multiple · Sep 16, 2025
